Saad Said (saadsaid158) — Security Researcher & Exploit Developer

Saad Said, also known as saadsaid158, is a 17-year-old security researcher, exploit developer, and reverse engineer based in the UK. Specialising in offensive security, CVE research, vulnerability research, and red teaming. Actively seeking opportunities in security research and penetration testing.

About Saad Said

A-Level student in the UK with 10+ public projects on GitHub. Has researched 2 CVEs and builds offensive security tools in Go, C, and Rust.

Projects

• Fusée Gelée PoC — Go-based implementation of CVE-2018-6242, a coldboot BootROM exploit targeting NVIDIA Tegra X1 chips in Nintendo Switch units. Features TUI, payload management, SHA256 verification, multi-device support, and JSON config. Cross-platform.
• Passman — Offline-first secret manager using AES-256-GCM and Argon2id for hardened key derivation. Implements fully encrypted vaults for credentials, TOTP secrets, and files with integrity checks and zero network surface.
• Chess Engine — A compact chess engine in Go with bitboard board representation, iterative deepening alpha-beta search, and perft validation. Two front ends: a local browser UI and UCI mode for standard chess GUIs.
• C2 Framework — A modular red team command-and-control framework. Cross-platform C implants (Windows + Linux) with a Go teamserver, multi-operator CLI, OTA update system, and a production build pipeline.

Skills & Tools

Exploit Development, Reverse Engineering, Privilege Escalation, Network Analysis, Malware Research, Tool Development, Go, C, Rust, Bash, Ghidra, Wireshark, Metasploit, Burp Suite, Linux.

Contact

Available for collaborations, security research projects, and opportunities. Contact via GitHub at github.com/SaadSaid158 or TryHackMe at tryhackme.com/p/Saad.Said158.